Determine which user deleted the OpenStack instance from nova-api logs

Problem

To find out which user did delete the VM instance from the environment

Environment

  • Platform9 Managed OpenStack - v4.0 and Higher

Procedure

Check for instance uuid and delete requests in the /var/log/nova/nova-api.log file which is found on the management plane. If you are not sure about instance uuid simply search for the delete entry in the nova-api.log.

Or

if you are unsure about the instance uuid you can reach out to pf9 support team in case of multiple VM deletion entries.

Log entry will have entry something like this:

Standard - log entry
Copy
Example log entry
Copy

In above example - description is given as below

Description
Copy

Now, search for that User-ID to get the exact username using below command:

Get username
Copy

Here, user@company-name.com is the user who deleted the VM.

VariableType to search · ESC to discard
GlossaryType to search · ESC to discard
InsertType to search · ESC to discard
No matches
Next to read:
Determine Which User Deleted VM instance

© 2025 Platform9. All Rights Reserved

On This Page
Determine which user deleted the OpenStack instance from nova-api logsProblemEnvironmentProcedure